starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-25 01:15:51 +03:00

[GH-ISSUE #4437] DNS Challenge Fail #2840

New issue

Open

opened 2026-02-26 07:36:57 +03:00 by kerem · 9 comments

kerem commented

2026-02-26 07:36:57 +03:00

Owner

Originally created by @martone65 on GitHub (Mar 14, 2025).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4437

Checklist

Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
- Yes / No
Are you sure you're not using someone else's docker image?
- Yes / No
Have you searched for similar issues (both open and closed)?
- Yes / No

Describe the bug

When I go to pull a new SSL certificate from Cloudflare via DNS Challenge I get the following error:

CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log
Error determining zone_id: 6003 Invalid request headers. Please confirm that you have supplied valid Cloudflare API credentials. (Did you copy your entire API token/key? To use Cloudflare tokens, you'll need the python package cloudflare>=2.3.1. This certbot is running cloudflare 2.19.4)
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)

I know my token is correct. I tested via curl.

Nginx Proxy Manager Version

v2.12.3

To Reproduce
Steps to reproduce the behavior:

Go to '...'
Click on '....'
Scroll down to '....'
See error

Expected behavior

A certificate from LetsEncrypt

I am using Ubuntu 22 server.

Originally created by @martone65 on GitHub (Mar 14, 2025). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4437  **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - **Yes** / No - Are you sure you're not using someone else's docker image? - **Yes** / No - Have you searched for similar issues (both open and closed)? - **Yes** / No **Describe the bug**  When I go to pull a new SSL certificate from Cloudflare via DNS Challenge I get the following error: ``` CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log Error determining zone_id: 6003 Invalid request headers. Please confirm that you have supplied valid Cloudflare API credentials. (Did you copy your entire API token/key? To use Cloudflare tokens, you'll need the python package cloudflare>=2.3.1. This certbot is running cloudflare 2.19.4) Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details. at /app/lib/utils.js:16:13 at ChildProcess.exithandler (node:child_process:430:5) at ChildProcess.emit (node:events:518:28) at maybeClose (node:internal/child_process:1104:16) at ChildProcess._handle.onexit (node:internal/child_process:304:5) ``` I know my token is correct. I tested via curl. **Nginx Proxy Manager Version**  v2.12.3 **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior**  A certificate from LetsEncrypt I am using Ubuntu 22 server.

kerem added the

stale

bug

labels

2026-02-26 07:36:57 +03:00

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@danielraffel commented on GitHub (Mar 14, 2025):

I’m experiencing the same issue.

@danielraffel commented on GitHub (Mar 14, 2025): I’m experiencing the same issue.

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@MIAOBUSI commented on GitHub (Mar 17, 2025):

I’m experiencing the same issue.

@MIAOBUSI commented on GitHub (Mar 17, 2025): I’m experiencing the same issue.

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@conotoium commented on GitHub (Mar 21, 2025):

Not sure if I can help but I did a wildcard for my domain via Lets encrypt with cloudflare dns challenge and it worked perfectly?

This is how I inserted mine?

# Cloudflare API token
dns_cloudflare_api_token=**********************************************

And are you certain you setup the zone rules correctly?

@conotoium commented on GitHub (Mar 21, 2025): Not sure if I can help but I did a wildcard for my domain via Lets encrypt with cloudflare dns challenge and it worked perfectly? This is how I inserted mine? ``` # Cloudflare API token dns_cloudflare_api_token=********************************************** ``` And are you certain you setup the zone rules correctly?

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@avilesj commented on GitHub (Mar 26, 2025):

Same issue here. I even tried the global token.

@avilesj commented on GitHub (Mar 26, 2025): Same issue here. I even tried the global token.

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@zefuros1991 commented on GitHub (Apr 3, 2025):

I am facing the same issue using NPM as LXC on my proxmox server, I ensured token is valid and active with curl, I also put adguard as DNS server for NPM and i see the DNS queries reach cloudflare. I changed back to my gateway as DNS after that same issue. Has anyone found anything yet?

@zefuros1991 commented on GitHub (Apr 3, 2025): I am facing the same issue using NPM as LXC on my proxmox server, I ensured token is valid and active with curl, I also put adguard as DNS server for NPM and i see the DNS queries reach cloudflare. I changed back to my gateway as DNS after that same issue. Has anyone found anything yet?

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@Speedyhome72 commented on GitHub (Apr 29, 2025):

Cloudflare API token

dns_cloudflare_email =
dns_cloudflare_api_key =

@Speedyhome72 commented on GitHub (Apr 29, 2025): # Cloudflare API token dns_cloudflare_email = <email> dns_cloudflare_api_key = <token>

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@dotku commented on GitHub (May 3, 2025):

Cloudflare API token

dns_cloudflare_email = dns_cloudflare_api_key =

use api_key instead of token would successfully gen the cert!

@dotku commented on GitHub (May 3, 2025): > # Cloudflare API token > dns_cloudflare_email = dns_cloudflare_api_key = use api_key instead of token would successfully gen the cert!

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@NehCoy commented on GitHub (May 26, 2025):

Hello!

Same problem here!

Checklist

Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
- Yes
Are you sure you're not using someone else's docker image?
- Yes
Have you searched for similar issues (both open and closed)?
- Yes

I have tried to perform the DNS Challenge with my domain provider Strato.

Error in WebUI:

CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at Socket. (node:internal/child_process:456:11)
    at Socket.emit (node:events:518:28)
    at Pipe. (node:net:343:12)

The content of the log file /tmp/letsencrypt-log/letsencrypt.log looks good for me. - No warnings, or errors inside.

Best regards,
NehCoy

@NehCoy commented on GitHub (May 26, 2025): Hello! Same problem here! **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes **Nginx Proxy Manager Version** v2.12.3 © 2024 I have tried to perform the DNS Challenge with my domain provider Strato. Error in WebUI: ![Image](https://github.com/user-attachments/assets/6cf91986-0928-4bfb-8352-42045db673e6) ``` CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log at /app/lib/utils.js:16:13 at ChildProcess.exithandler (node:child_process:430:5) at ChildProcess.emit (node:events:518:28) at maybeClose (node:internal/child_process:1104:16) at Socket. (node:internal/child_process:456:11) at Socket.emit (node:events:518:28) at Pipe. (node:net:343:12) ``` The content of the log file `/tmp/letsencrypt-log/letsencrypt.log` looks good for me. - No warnings, or errors inside. Best regards, NehCoy

kerem commented

2026-02-26 07:36:57 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Dec 13, 2025):

Issue is now considered stale. If you want to keep it open, please comment 👍

@github-actions[bot] commented on GitHub (Dec 13, 2025): Issue is now considered stale. If you want to keep it open, please comment :+1:

kerem referenced this issue

2026-02-26 08:31:53 +03:00

[PR #3841] feat(streams): Simple Load Balancing of Streams #3769

kerem referenced this issue

2026-02-26 08:33:03 +03:00

[PR #5184] Add rate limiting, load balancing features and pt_br locale #4081

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#2840

No description provided.

Rows
Columns